continuwuation/continuwuity

Watch

Fork 132

chore(deps): update rust-non-major #2364

Open

renovate wants to merge 1 commit from renovate/rust-non-major into main

renovate commented

2026-10-14 05:18:35 +00:00

Collaborator

This PR contains the following updates:

Package	Type	Update	Change
aws-lc-rs	dependencies	patch	`1.18.1` → `1.18.2`
either	workspace.dependencies	minor	`1.18.0` → `1.19.0`
hyper (source)	workspace.dependencies	minor	`1.11.1` → `1.12.0`
minicbor	workspace.dependencies	patch	`2.3.0` → `2.3.1`
resolvematrix (source)	workspace.dependencies	minor	`1.3.0` → `1.4.0`
serde_json	workspace.dependencies	patch	`1.0.151` → `1.0.154`
smallvec	workspace.dependencies	patch	`1.16.1` → `1.16.3`
syn	workspace.dependencies	patch	`3.0.6` → `3.0.9`
tokio (source)	workspace.dependencies	patch	`1.53.1` → `1.53.3`
toml	workspace.dependencies	patch	`1.1.6+spec-1.1.0` → `1.1.8`

Release Notes

aws/aws-lc-rs (aws-lc-rs)

`v1.18.2`: aws-lc-rs v1.18.2

Compare Source

What's Changed

Implement Eq and PartialEq for RSA and EdDSA parameters by @dsykes16 in #1228
- RsaParameters can now be compared directly against RSA verification constants. Algorithms with different digests, padding schemes, or modulus-size ranges compare unequal. EdDSAParameters also gains equality support.
Add wasm32-wasip2 and wasm32-wasip3 support by @ricochet in #1239
- Adds non-FIPS builds using universal bindings, with CI coverage under Wasmtime and wasi-sdk 34. WASIp3 requires nightly Rust.
- Direct aws-lc-sys consumers must disable the default all-bindings feature for these targets.
Publish the intended RandomizedNonceKey::open_in_place documentation by @Serophots in #1227
- Makes the existing nonce, ciphertext/tag layout, and buffer-on-error contract visible in rustdoc. No runtime behavior changes.

Upstream AWS-LC

aws-lc-sys v0.46.0 aligns with AWS-LC v5.11.0 (previously v5.7.0). See also the release notes for v5.8.0, v5.9.0, and v5.10.0.
- The Ed25519 C-implementation decoder now rejects non-canonical public keys, matching the assembly-optimized implementations: aws/aws-lc#3457
- Includes ChaCha20-Poly1305 key-material zeroization and fixes ML-KEM CPU feature detection to avoid illegal-instruction failures on x86-64 CPUs with AVX2 but no BMI2: aws/aws-lc#3552 and aws/aws-lc#3596
aws-lc-fips-sys v0.14.3 updates its bundled AWS-LC FIPS 4.2.0 snapshot and regenerates bindings. It remains on the FIPS 4.x release line.

Build Improvements

Raise the minimum system AWS-LC version to 5.7.0 by @justsmth in #1243
- Non-FIPS system-library installations must now provide AWS-LC 5.7.0 or newer, previously 1.68.0. Bundled-source builds and FIPS version requirements are unchanged.
Fix static FIPS system-library linking by @justsmth in #1236
- Fixes unresolved FIPS_mode references with GNU ld.bfd when linking a prebuilt static FIPS library, including binaries that do not call crypto and builds where LTO removes those calls.
- Uses whole-archive linking to retain libcrypto, including in downstream Rust staticlib outputs. This can increase binary size; dynamic FIPS and non-FIPS linking are unchanged.
Fix Cranelift linking by @justsmth in #1234
- Normalizes binding link names to avoid undefined-symbol failures, including when Cranelift is selected through Cargo profiles rather than RUSTFLAGS. The AWS_LC_SYS_NO_U1_BINDINGS workaround is no longer needed.
Fix jitterentropy builds with optimizing CFLAGS and newer cc versions by @justsmth in #1254
- Keeps filtered flags in effect throughout the jitterentropy builder's lifetime, preventing cached environment reads from allowing flags such as -O2 to override its required -O0.
Honor AWS_LC_SYS_CC in the main library build by @justsmth in #1255
- Applies crate-specific compiler overrides before compiler lookup in both CC and CMake build paths, keeping compiler selection and capability probes consistent when cc caches environment reads.
Improve archive reproducibility through symlinked build paths by @justsmth in #1238
- Prevents the non-Windows CC builder from incorporating symlink-resolved absolute build paths into archive member names, avoiding unnecessary downstream compile-cache misses. Windows short-path handling is unchanged.
Upgrade bindgen to 0.73 by @xtqqczze in #1244
Document the system-library trust model by @justsmth in #1218
- Clarifies that supplied paths and pkg-config results are trusted build inputs, and that FIPS validation can execute candidate library code before accepting or rejecting it. Documents runner requirements and how to disable automatic system-library detection.

Issues Being Closed

Cranelift builds fail with codegen-backend = "cranelift" -- #1231
Upgrade bindgen to v0.73 -- #1245
Undefined FIPS_mode when linking a prebuilt FIPS module into a binary that does not use crypto -- #1246
Jitterentropy fails with "must not be compiled with optimizations" in aws-lc-rs v1.18.1 / aws-lc-sys v0.45.0 -- #1252

Other Merged PRs

Add security review workflow by @nhatnghiho in #1226
docs: align pull request template with AWS-LC by @justsmth in #1219
ci: verify docs.rs build with read-only crate sources by @justsmth in #1209
ci: harden workflows and release tooling by @justsmth in #1216
ci: harden documentation deployment by @justsmth in #1217
ci: fix rustls integration against rustls-aws-lc-rs by @justsmth in #1229
build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by @dependabot[bot] in #1232
build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #1235
build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 by @dependabot[bot] in #1237
Fix Clippy failures with bindgen 0.73 by @justsmth in #1250
Prepare aws-lc-sys v0.46.0 and aws-lc-rs v1.18.2 by @justsmth in #1256
Prepare aws-lc-fips-sys v0.14.3 by @justsmth in #1258

New Contributors

@nhatnghiho made their first contribution in #1226
@dsykes16 made their first contribution in #1228
@Serophots made their first contribution in #1227
@ricochet made their first contribution in #1239
@xtqqczze made their first contribution in #1244

Full Changelog: https://github.com/aws/aws-lc-rs/compare/v1.18.1...v1.18.2

rayon-rs/either (either)

`v1.12.0`

Compare Source

Bug Fixes

http1:
- withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)
- remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)
- always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)
- let a Connection close token win over a later keep-alive (#4201) (5dadff76)
- preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)
http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

v1.11.1 (2026-08-27)

Bug Fixes

http1:
- detect TE: trailers caselessly and with other values (#4152) (72fcf545)
- recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
- flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
- evict pooled conn on request-side Connection: close (#4110) (da19be08)

twittner/minicbor (minicbor)

`v2.3.1`

Compare Source

Fixes potential overflow panic when decoding std::time::Duration.
See pull request [75][pr75] by @sdbondi for details.
Adds support for Box<[T]>. See pull request [69][pr69] by @sdbondi for details.

continuwuation/resolvematrix (resolvematrix)

`v1.4.0`

Compare Source

Changes

Added CLI https://forgejo.ellis.link/continuwuation/resolvematrix/commit/87e8e31355dcf1b95ac64a1a0593f194df79b32b
Add support for MSC4188
Replace futures with tokio-stream

serde-rs/json (serde_json)

`v1.0.154`

Compare Source

Support preserve_order in no_std builds (#1333, thanks @razmser)

`v1.0.153`

Compare Source

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

`v1.0.152`

Compare Source

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)
Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

servo/rust-smallvec (smallvec)

`v1.16.3`

Compare Source

What's Changed

Port new fuzzer to v1 by @bolshoytoster in #678
fix: overflow during fuzzy check by @GauravPawar101 in #693
chore: bump version by @alejandro-vaz in #723

Full Changelog: https://github.com/servo/rust-smallvec/compare/v1.16.2...v1.16.3

`v1.16.2`

Compare Source

What's Changed

Backport v2’s retain implementation to v1 by @charliermarsh in #596
Fix element ownership tracking with may_dangle by @charliermarsh in #594
Fix Cargo manual_readme warning by @Rayan-and-beyond in #608
chore: bump version by @alejandro-vaz in #617

New Contributors

@Rayan-and-beyond made their first contribution in #608

Full Changelog: https://github.com/servo/rust-smallvec/compare/v1.16.1...v1.16.2

dtolnay/syn (syn)

`v3.0.9`

Compare Source

Add Punctuated::retain (#2088)

`v3.0.8`

Compare Source

Fix parsing of <- and -> tokens in expressions (#2086, #2087)

`v3.0.7`

Compare Source

Fix parsing absolute path expr in labeled break (#2085, thanks @A4-Tacks)

tokio-rs/tokio (tokio)

`v1.53.3`: Tokio v1.53.3

Compare Source

1.53.3 (October 13th, 2026)

Added

io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

io: wake and drop DuplexStream wakers outside the lock (#8618)
macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
sync: wake waiters outside the lock when closing a semaphore (#8529)
test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

rt: keep io_uring op alive when submission fails after push (#8185)

`v1.53.2`: Tokio v1.53.2

Compare Source

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)
io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
process: unregister Windows wait before closing child handle (#8564)
rt: drop blocking pool mutex before shutting down rejected task (#8562)
sync: fix mpsc index wraparound in block reclamation (#8546)
sync: forget mpsc Permit before sending value (#8560)
sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
sync: wake broadcast Sender::closed outside mutex (#8558)
task: drop replaced waker outside lock in JoinSet (#8554)
time: drop timer lock before dropping waker in clear_entry (#8552)
time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)
rt: ignore current_thread task dumps from other runtimes (#8544)
rt: preserve io_uring context if a completion waker panics (#8566)
sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
taskdump: restore deferred leaf wakes during capture (#8445)
time: drop stored waker when cancelling alt timer entry (#8550)

toml-rs/toml (toml)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | dependencies | patch | `1.18.1` → `1.18.2` | | [either](https://github.com/rayon-rs/either) | workspace.dependencies | minor | `1.18.0` → `1.19.0` | | [hyper](https://hyper.rs) ([source](https://github.com/hyperium/hyper)) | workspace.dependencies | minor | `1.11.1` → `1.12.0` | | [minicbor](https://github.com/twittner/minicbor) | workspace.dependencies | patch | `2.3.0` → `2.3.1` | | [resolvematrix](https://forgejo.ellis.link/continuwuation/resolvematrix) ([source](https://forgejo.ellis.link/continuwuation/resolvematrix.git)) | workspace.dependencies | minor | `1.3.0` → `1.4.0` | | [serde_json](https://github.com/serde-rs/json) | workspace.dependencies | patch | `1.0.151` → `1.0.154` | | [smallvec](https://github.com/servo/rust-smallvec) | workspace.dependencies | patch | `1.16.1` → `1.16.3` | | [syn](https://github.com/dtolnay/syn) | workspace.dependencies | patch | `3.0.6` → `3.0.9` | | [tokio](https://tokio.rs) ([source](https://github.com/tokio-rs/tokio)) | workspace.dependencies | patch | `1.53.1` → `1.53.3` | | [toml](https://github.com/toml-rs/toml) | workspace.dependencies | patch | `1.1.6+spec-1.1.0` → `1.1.8` | --- ### Release Notes <details> <summary>aws/aws-lc-rs (aws-lc-rs)</summary> ### [`v1.18.2`](https://github.com/aws/aws-lc-rs/releases/tag/v1.18.2): aws-lc-rs v1.18.2 [Compare Source](https://github.com/aws/aws-lc-rs/compare/v1.18.1...v1.18.2) #### What's Changed - Implement `Eq` and `PartialEq` for RSA and EdDSA parameters by [@dsykes16](https://github.com/dsykes16) in [#1228](https://github.com/aws/aws-lc-rs/pull/1228) - `RsaParameters` can now be compared directly against RSA verification constants. Algorithms with different digests, padding schemes, or modulus-size ranges compare unequal. `EdDSAParameters` also gains equality support. - Add `wasm32-wasip2` and `wasm32-wasip3` support by [@ricochet](https://github.com/ricochet) in [#1239](https://github.com/aws/aws-lc-rs/pull/1239) - Adds non-FIPS builds using universal bindings, with CI coverage under Wasmtime and wasi-sdk 34. WASIp3 requires nightly Rust. - Direct `aws-lc-sys` consumers must disable the default `all-bindings` feature for these targets. - Publish the intended `RandomizedNonceKey::open_in_place` documentation by [@Serophots](https://github.com/Serophots) in [#1227](https://github.com/aws/aws-lc-rs/pull/1227) - Makes the existing nonce, ciphertext/tag layout, and buffer-on-error contract visible in rustdoc. No runtime behavior changes. ##### Upstream AWS-LC - `aws-lc-sys` v0.46.0 aligns with [AWS-LC v5.11.0](https://github.com/aws/aws-lc/releases/tag/v5.11.0) (previously v5.7.0). See also the release notes for [v5.8.0](https://github.com/aws/aws-lc/releases/tag/v5.8.0), [v5.9.0](https://github.com/aws/aws-lc/releases/tag/v5.9.0), and [v5.10.0](https://github.com/aws/aws-lc/releases/tag/v5.10.0). - The [`Ed25519`](https://github.com/aws/aws-lc-rs/commit/Ed25519) C-implementation decoder now rejects non-canonical public keys, matching the assembly-optimized implementations: [aws/aws-lc#3457](https://github.com/aws/aws-lc/pull/3457) - Includes ChaCha20-Poly1305 key-material zeroization and fixes ML-KEM CPU feature detection to avoid illegal-instruction failures on x86-64 CPUs with AVX2 but no BMI2: [aws/aws-lc#3552](https://github.com/aws/aws-lc/pull/3552) and [aws/aws-lc#3596](https://github.com/aws/aws-lc/pull/3596) - `aws-lc-fips-sys` v0.14.3 updates its bundled AWS-LC FIPS 4.2.0 snapshot and regenerates bindings. It remains on the FIPS 4.x release line. ##### Build Improvements - Raise the minimum system AWS-LC version to 5.7.0 by [@justsmth](https://github.com/justsmth) in [#1243](https://github.com/aws/aws-lc-rs/pull/1243) - Non-FIPS system-library installations must now provide AWS-LC 5.7.0 or newer, previously 1.68.0. Bundled-source builds and FIPS version requirements are unchanged. - Fix static FIPS system-library linking by [@justsmth](https://github.com/justsmth) in [#1236](https://github.com/aws/aws-lc-rs/pull/1236) - Fixes unresolved `FIPS_mode` references with GNU ld.bfd when linking a prebuilt static FIPS library, including binaries that do not call crypto and builds where LTO removes those calls. - Uses whole-archive linking to retain libcrypto, including in downstream Rust `staticlib` outputs. This can increase binary size; dynamic FIPS and non-FIPS linking are unchanged. - Fix Cranelift linking by [@justsmth](https://github.com/justsmth) in [#1234](https://github.com/aws/aws-lc-rs/pull/1234) - Normalizes binding link names to avoid undefined-symbol failures, including when Cranelift is selected through Cargo profiles rather than `RUSTFLAGS`. The `AWS_LC_SYS_NO_U1_BINDINGS` workaround is no longer needed. - Fix jitterentropy builds with optimizing `CFLAGS` and newer `cc` versions by [@justsmth](https://github.com/justsmth) in [#1254](https://github.com/aws/aws-lc-rs/pull/1254) - Keeps filtered flags in effect throughout the jitterentropy builder's lifetime, preventing cached environment reads from allowing flags such as `-O2` to override its required `-O0`. - Honor `AWS_LC_SYS_CC` in the main library build by [@justsmth](https://github.com/justsmth) in [#1255](https://github.com/aws/aws-lc-rs/pull/1255) - Applies crate-specific compiler overrides before compiler lookup in both CC and CMake build paths, keeping compiler selection and capability probes consistent when `cc` caches environment reads. - Improve archive reproducibility through symlinked build paths by [@justsmth](https://github.com/justsmth) in [#1238](https://github.com/aws/aws-lc-rs/pull/1238) - Prevents the non-Windows CC builder from incorporating symlink-resolved absolute build paths into archive member names, avoiding unnecessary downstream compile-cache misses. Windows short-path handling is unchanged. - Upgrade bindgen to 0.73 by [@xtqqczze](https://github.com/xtqqczze) in [#1244](https://github.com/aws/aws-lc-rs/pull/1244) - Document the system-library trust model by [@justsmth](https://github.com/justsmth) in [#1218](https://github.com/aws/aws-lc-rs/pull/1218) - Clarifies that supplied paths and pkg-config results are trusted build inputs, and that FIPS validation can execute candidate library code before accepting or rejecting it. Documents runner requirements and how to disable automatic system-library detection. ##### Issues Being Closed - Cranelift builds fail with `codegen-backend = "cranelift"` -- [#1231](https://github.com/aws/aws-lc-rs/issues/1231) - Upgrade bindgen to v0.73 -- [#1245](https://github.com/aws/aws-lc-rs/issues/1245) - Undefined `FIPS_mode` when linking a prebuilt FIPS module into a binary that does not use crypto -- [#1246](https://github.com/aws/aws-lc-rs/issues/1246) - Jitterentropy fails with "must not be compiled with optimizations" in aws-lc-rs v1.18.1 / aws-lc-sys v0.45.0 -- [#1252](https://github.com/aws/aws-lc-rs/issues/1252) #### Other Merged PRs - Add security review workflow by [@nhatnghiho](https://github.com/nhatnghiho) in [#1226](https://github.com/aws/aws-lc-rs/pull/1226) - docs: align pull request template with AWS-LC by [@justsmth](https://github.com/justsmth) in [#1219](https://github.com/aws/aws-lc-rs/pull/1219) - ci: verify docs.rs build with read-only crate sources by [@justsmth](https://github.com/justsmth) in [#1209](https://github.com/aws/aws-lc-rs/pull/1209) - ci: harden workflows and release tooling by [@justsmth](https://github.com/justsmth) in [#1216](https://github.com/aws/aws-lc-rs/pull/1216) - ci: harden documentation deployment by [@justsmth](https://github.com/justsmth) in [#1217](https://github.com/aws/aws-lc-rs/pull/1217) - ci: fix rustls integration against rustls-aws-lc-rs by [@justsmth](https://github.com/justsmth) in [#1229](https://github.com/aws/aws-lc-rs/pull/1229) - build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1232](https://github.com/aws/aws-lc-rs/pull/1232) - build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1235](https://github.com/aws/aws-lc-rs/pull/1235) - build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1237](https://github.com/aws/aws-lc-rs/pull/1237) - Fix Clippy failures with bindgen 0.73 by [@justsmth](https://github.com/justsmth) in [#1250](https://github.com/aws/aws-lc-rs/pull/1250) - Prepare aws-lc-sys v0.46.0 and aws-lc-rs v1.18.2 by [@justsmth](https://github.com/justsmth) in [#1256](https://github.com/aws/aws-lc-rs/pull/1256) - Prepare aws-lc-fips-sys v0.14.3 by [@justsmth](https://github.com/justsmth) in [#1258](https://github.com/aws/aws-lc-rs/pull/1258) #### New Contributors - [@nhatnghiho](https://github.com/nhatnghiho) made their first contribution in [#1226](https://github.com/aws/aws-lc-rs/pull/1226) - [@dsykes16](https://github.com/dsykes16) made their first contribution in [#1228](https://github.com/aws/aws-lc-rs/pull/1228) - [@Serophots](https://github.com/Serophots) made their first contribution in [#1227](https://github.com/aws/aws-lc-rs/pull/1227) - [@ricochet](https://github.com/ricochet) made their first contribution in [#1239](https://github.com/aws/aws-lc-rs/pull/1239) - [@xtqqczze](https://github.com/xtqqczze) made their first contribution in [#1244](https://github.com/aws/aws-lc-rs/pull/1244) **Full Changelog**: <https://github.com/aws/aws-lc-rs/compare/v1.18.1...v1.18.2> </details> <details> <summary>rayon-rs/either (either)</summary> ### [`v1.19.0`](https://github.com/rayon-rs/either/compare/1.18.0...1.19.0) [Compare Source](https://github.com/rayon-rs/either/compare/1.18.0...1.19.0) </details> <details> <summary>hyperium/hyper (hyper)</summary> ### [`v1.12.0`](https://github.com/hyperium/hyper/blob/HEAD/CHANGELOG.md#v1120-2026-10-06) [Compare Source](https://github.com/hyperium/hyper/compare/v1.11.1...v1.12.0) ##### Bug Fixes - **http1:** - withdraw a stale want when the client dispatcher takes a request ([#4208](https://github.com/hyperium/hyper/issues/4208)) ([c44f1cc5](https://github.com/hyperium/hyper/commit/c44f1cc51c2bc45b502031a646d3d54315bd7a16)) - remove content-length if transfer-encoding is auto-added ([#4224](https://github.com/hyperium/hyper/issues/4224)) ([69396fdd](https://github.com/hyperium/hyper/commit/69396fdd960629d69b09cc6c9b367ef8650c001d)) - always remove content-length if transfer-encoding is sent ([#4223](https://github.com/hyperium/hyper/issues/4223)) ([a5d7fd78](https://github.com/hyperium/hyper/commit/a5d7fd7861598c0b8c857cb75240a75bcfbd96a3)) - let a Connection close token win over a later keep-alive ([#4201](https://github.com/hyperium/hyper/issues/4201)) ([5dadff76](https://github.com/hyperium/hyper/commit/5dadff76d1cb5d21046218df3568569fbba8ed21)) - preserve hop-by-hop when setting close or keep-alive ([#4196](https://github.com/hyperium/hyper/issues/4196)) ([74a39081](https://github.com/hyperium/hyper/commit/74a39081ff1496970fb75da75c5282b23a9b69e5)) - **http2:** do not reserve capacity for idle Upgraded streams ([#4198](https://github.com/hyperium/hyper/issues/4198)) ([e89d0d93](https://github.com/hyperium/hyper/commit/e89d0d93d9566210ee95aea234a00952ebc4a202)) ##### Features - **http1:** add max_header_size limit for server and client ([#4183](https://github.com/hyperium/hyper/issues/4183)) ([d1cd14ef](https://github.com/hyperium/hyper/commit/d1cd14eff392be63a2318d690cc9380723ec61a1), closes [#3832](https://github.com/hyperium/hyper/issues/3832)) ##### v1.11.1 (2026-08-27) ##### Bug Fixes - **http1:** - detect TE: trailers caselessly and with other values ([#4152](https://github.com/hyperium/hyper/issues/4152)) ([72fcf545](https://github.com/hyperium/hyper/commit/72fcf545c9b4a261f31d89bafd3019a2d4e9e1d7)) - recognize `\n\r\n` as a head terminator in the partial-read fast path ([#4147](https://github.com/hyperium/hyper/issues/4147)) ([3534d75c](https://github.com/hyperium/hyper/commit/3534d75c898da17b023e6bff9b4cf71afed123ad), closes [#4145](https://github.com/hyperium/hyper/issues/4145)) - flush bytes buffered by the write re-check before yielding ([#4143](https://github.com/hyperium/hyper/issues/4143)) ([f660f5bf](https://github.com/hyperium/hyper/commit/f660f5bf6eed3fe793f899507ff5bb9e266d4b0d)) - evict pooled conn on request-side Connection: close ([#4110](https://github.com/hyperium/hyper/issues/4110)) ([da19be08](https://github.com/hyperium/hyper/commit/da19be08f34d3da01c4c0f9cfe2837e7d377f73d)) </details> <details> <summary>twittner/minicbor (minicbor)</summary> ### [`v2.3.1`](https://github.com/twittner/minicbor/blob/HEAD/CHANGELOG.md#231) [Compare Source](https://github.com/twittner/minicbor/compare/minicbor-v2.3.0...minicbor-v2.3.1) - Fixes potential overflow panic when decoding `std::time::Duration`. See pull request \[75]\[pr75] by [@sdbondi](https://github.com/sdbondi) for details. - Adds support for `Box<[T]>`. See pull request \[69]\[pr69] by [@sdbondi](https://github.com/sdbondi) for details. </details> <details> <summary>continuwuation/resolvematrix (resolvematrix)</summary> ### [`v1.4.0`](https://forgejo.ellis.link/continuwuation/resolvematrix/releases/tag/v1.4.0) [Compare Source](https://forgejo.ellis.link/continuwuation/resolvematrix/compare/v1.3.0...v1.4.0) #### Changes - Added CLI <https://forgejo.ellis.link/continuwuation/resolvematrix/commit/87e8e31355dcf1b95ac64a1a0593f194df79b32b> - Add support for [MSC4188](https://github.com/matrix-org/matrix-spec-proposals/pull/4188) - Replace `futures` with `tokio-stream` </details> <details> <summary>serde-rs/json (serde_json)</summary> ### [`v1.0.154`](https://github.com/serde-rs/json/releases/tag/v1.0.154) [Compare Source](https://github.com/serde-rs/json/compare/v1.0.153...v1.0.154) - Support preserve_order in no_std builds ([#1333](https://github.com/serde-rs/json/issues/1333), thanks [@razmser](https://github.com/razmser)) ### [`v1.0.153`](https://github.com/serde-rs/json/releases/tag/v1.0.153) [Compare Source](https://github.com/serde-rs/json/compare/v1.0.152...v1.0.153) - Report invalid UTF-8 at the first bad byte ([#1345](https://github.com/serde-rs/json/issues/1345), thanks [@00200200](https://github.com/00200200)) ### [`v1.0.152`](https://github.com/serde-rs/json/releases/tag/v1.0.152) [Compare Source](https://github.com/serde-rs/json/compare/v1.0.151...v1.0.152) - Preserve sign of `-0` in arbitrary_precision mode ([#1346](https://github.com/serde-rs/json/issues/1346), thanks [@yuxi-liu-wired](https://github.com/yuxi-liu-wired)) - Fix comparison of large non-integer values with f32::INFINITY ([#1347](https://github.com/serde-rs/json/issues/1347), thanks [@yuxi-liu-wired](https://github.com/yuxi-liu-wired)) </details> <details> <summary>servo/rust-smallvec (smallvec)</summary> ### [`v1.16.3`](https://github.com/servo/rust-smallvec/releases/tag/v1.16.3) [Compare Source](https://github.com/servo/rust-smallvec/compare/v1.16.2...v1.16.3) #### What's Changed - Port new fuzzer to v1 by [@bolshoytoster](https://github.com/bolshoytoster) in [#678](https://github.com/servo/rust-smallvec/pull/678) - fix: overflow during fuzzy check by [@GauravPawar101](https://github.com/GauravPawar101) in [#693](https://github.com/servo/rust-smallvec/pull/693) - chore: bump version by [@alejandro-vaz](https://github.com/alejandro-vaz) in [#723](https://github.com/servo/rust-smallvec/pull/723) **Full Changelog**: <https://github.com/servo/rust-smallvec/compare/v1.16.2...v1.16.3> ### [`v1.16.2`](https://github.com/servo/rust-smallvec/releases/tag/v1.16.2) [Compare Source](https://github.com/servo/rust-smallvec/compare/v1.16.1...v1.16.2) #### What's Changed - Backport v2’s retain implementation to v1 by [@charliermarsh](https://github.com/charliermarsh) in [#596](https://github.com/servo/rust-smallvec/pull/596) - Fix element ownership tracking with may_dangle by [@charliermarsh](https://github.com/charliermarsh) in [#594](https://github.com/servo/rust-smallvec/pull/594) - Fix Cargo manual_readme warning by [@Rayan-and-beyond](https://github.com/Rayan-and-beyond) in [#608](https://github.com/servo/rust-smallvec/pull/608) - chore: bump version by [@alejandro-vaz](https://github.com/alejandro-vaz) in [#617](https://github.com/servo/rust-smallvec/pull/617) #### New Contributors - [@Rayan-and-beyond](https://github.com/Rayan-and-beyond) made their first contribution in [#608](https://github.com/servo/rust-smallvec/pull/608) **Full Changelog**: <https://github.com/servo/rust-smallvec/compare/v1.16.1...v1.16.2> </details> <details> <summary>dtolnay/syn (syn)</summary> ### [`v3.0.9`](https://github.com/dtolnay/syn/releases/tag/3.0.9) [Compare Source](https://github.com/dtolnay/syn/compare/3.0.8...3.0.9) - Add Punctuated::retain ([#2088](https://github.com/dtolnay/syn/issues/2088)) ### [`v3.0.8`](https://github.com/dtolnay/syn/releases/tag/3.0.8) [Compare Source](https://github.com/dtolnay/syn/compare/3.0.7...3.0.8) - Fix parsing of `<-` and `->` tokens in expressions ([#2086](https://github.com/dtolnay/syn/issues/2086), [#2087](https://github.com/dtolnay/syn/issues/2087)) ### [`v3.0.7`](https://github.com/dtolnay/syn/releases/tag/3.0.7) [Compare Source](https://github.com/dtolnay/syn/compare/3.0.6...3.0.7) - Fix parsing absolute path expr in labeled break ([#2085](https://github.com/dtolnay/syn/issues/2085), thanks [@A4-Tacks](https://github.com/A4-Tacks)) </details> <details> <summary>tokio-rs/tokio (tokio)</summary> ### [`v1.53.3`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.53.3): Tokio v1.53.3 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.53.2...tokio-1.53.3) ### 1.53.3 (October 13th, 2026) ##### Added - io: add `AsyncFd::register` and `AsyncFd::register_with_interest` ([#8587]) ##### Changed - io: deprecate `AsyncFd::{new, with_interest, try_new, try_with_interest}` ([#8587]) ##### Fixed - io: wake and drop `DuplexStream` wakers outside the lock ([#8618]) - macros: avoid `unreachable_code` in `join!` and `try_join!` for `Infallible` ([#8518]) - runtime: fix paused time auto-advancing when I/O wakes a task on `current_thread` ([#8595]) - sync: wake waiters outside the lock when closing a semaphore ([#8529]) - test: fix several flaky tests ([#8196], [#8427], [#8609]) ##### Fixed (unstable) - rt: keep `io_uring` op alive when submission fails after push ([#8185]) [#8185]: https://github.com/tokio-rs/tokio/pull/8185 [#8196]: https://github.com/tokio-rs/tokio/pull/8196 [#8427]: https://github.com/tokio-rs/tokio/pull/8427 [#8518]: https://github.com/tokio-rs/tokio/pull/8518 [#8529]: https://github.com/tokio-rs/tokio/pull/8529 [#8587]: https://github.com/tokio-rs/tokio/pull/8587 [#8595]: https://github.com/tokio-rs/tokio/pull/8595 [#8609]: https://github.com/tokio-rs/tokio/pull/8609 [#8618]: https://github.com/tokio-rs/tokio/pull/8618 ### [`v1.53.2`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.53.2): Tokio v1.53.2 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.53.1...tokio-1.53.2) ### 1.53.2 (October 3rd, 2026) ##### Fixed - fs: handle integer overflow in buffered relative seek ([#8574]) - io: revert "always cleanup `AsyncFd` registration list on deregister" ([#8540]) - process: unregister Windows wait before closing child handle ([#8564]) - rt: drop blocking pool mutex before shutting down rejected task ([#8562]) - sync: fix mpsc index wraparound in block reclamation ([#8546]) - sync: forget mpsc `Permit` before sending value ([#8560]) - sync: validate `MAX_PERMITS` in `Semaphore::acquire` ([#8548]) - sync: wake broadcast `Sender::closed` outside mutex ([#8558]) - task: drop replaced waker outside lock in `JoinSet` ([#8554]) - time: drop timer lock before dropping waker in `clear_entry` ([#8552]) - time: expire timers directly on shutdown without rotating wheel ([#8570]) ##### Fixed (unstable) - fs: clamp `io_uring` read length to `u32::MAX` ([#8572]) - rt: ignore `current_thread` task dumps from other runtimes ([#8544]) - rt: preserve `io_uring` context if a completion waker panics ([#8566]) - sync: fix semaphore use-after-free and permit leak on tracing panic ([#8542]) - taskdump: restore deferred leaf wakes during capture ([#8445]) - time: drop stored waker when cancelling alt timer entry ([#8550]) [#8445]: https://github.com/tokio-rs/tokio/pull/8445 [#8572]: https://github.com/tokio-rs/tokio/pull/8572 [#8540]: https://github.com/tokio-rs/tokio/pull/8540 [#8542]: https://github.com/tokio-rs/tokio/pull/8542 [#8544]: https://github.com/tokio-rs/tokio/pull/8544 [#8546]: https://github.com/tokio-rs/tokio/pull/8546 [#8548]: https://github.com/tokio-rs/tokio/pull/8548 [#8550]: https://github.com/tokio-rs/tokio/pull/8550 [#8552]: https://github.com/tokio-rs/tokio/pull/8552 [#8554]: https://github.com/tokio-rs/tokio/pull/8554 [#8558]: https://github.com/tokio-rs/tokio/pull/8558 [#8560]: https://github.com/tokio-rs/tokio/pull/8560 [#8562]: https://github.com/tokio-rs/tokio/pull/8562 [#8564]: https://github.com/tokio-rs/tokio/pull/8564 [#8566]: https://github.com/tokio-rs/tokio/pull/8566 [#8570]: https://github.com/tokio-rs/tokio/pull/8570 [#8574]: https://github.com/tokio-rs/tokio/pull/8574 </details> <details> <summary>toml-rs/toml (toml)</summary> ### [`v1.1.8`](https://github.com/toml-rs/toml/compare/toml-v1.1.7...toml-v1.1.8) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v1.1.7...toml-v1.1.8) ### [`v1.1.7`](https://github.com/toml-rs/toml/compare/toml-v1.1.6...toml-v1.1.7) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v1.1.6...toml-v1.1.7) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate added the

Dependencies

Dependencies/Renovate

labels

2026-10-14 05:18:35 +00:00

renovate added 1 commit

2026-10-14 05:18:35 +00:00

chore(deps): update rust-non-major

Auto Labeler / Apply labels based on changed files (pull_request_target) Successful in 3s

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 1m7s

Details

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 1m23s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 10m12s

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 20m55s

Details

16a9ec8763

renovate force-pushed renovate/rust-non-major from 16a9ec8763

Auto Labeler / Apply labels based on changed files (pull_request_target) Successful in 3s

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 1m7s

Details

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 1m23s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 10m12s

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 20m55s

Details

to 679a29d814

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 1m8s

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m15s

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 1m21s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m57s

Details

2026-10-16 05:04:39 +00:00

Compare

renovate force-pushed renovate/rust-non-major from 679a29d814

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 1m8s

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m15s

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 1m21s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m57s

Details

to 672bb65291

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 1m9s

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m13s

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 2m26s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 12m56s

Details

2026-10-19 05:18:50 +00:00

Compare

renovate force-pushed renovate/rust-non-major from 672bb65291

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 1m9s

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m13s

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 2m26s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 12m56s

Details

to 20682f6b6f

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 8s

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m15s

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 1m33s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 10m29s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Failing after 40m29s

Details

2026-10-19 05:41:05 +00:00

Compare

Checks / Changelog / Check changelog is added (pull_request_target) Successful in 8s

Required

Details

Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m15s

Required

Details

Checks / Prek / Check changed files (pull_request) Successful in 6s

Required

Details

Update flake hashes / update-flake-hashes (pull_request) Successful in 1m33s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 10m29s

Details

Checks / Prek / Clippy and Cargo Tests (pull_request) Failing after 40m29s

Required

Details

Some required checks were not successful.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/rust-non-major:renovate/rust-non-major

git switch renovate/rust-non-major

No reviewers

No labels

Dependencies/Renovate

Matrix/Administration

Rows
Columns

chore(deps): update rust-non-major #2364

Release Notes

v1.18.2: aws-lc-rs v1.18.2

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

Bug Fixes

Features

v1.11.1 (2026-08-27)

Bug Fixes

Changes

What's Changed

What's Changed

New Contributors

v1.53.3: Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

Changed

Fixed

Fixed (unstable)

v1.53.2: Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

Configuration

Checkout

`v1.18.2`: aws-lc-rs v1.18.2

`v1.53.3`: Tokio v1.53.3

`v1.53.2`: Tokio v1.53.2